$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: gQXcNvbh+Q7g0Xooi/LSu0g+EEprvj2Sakg7vS+ql2w= Subject key identifier: 98:05:F9:E7:4F:A2:29:51:78:77:CB:B2:61:C9:C8:A2:81:1D:52:C1 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: E9 Signing time: Sun 19 Oct 2025 08:22:27 +0000 Manifest this update: Sun 19 Oct 2025 08:22:26 +0000 Manifest next update: Sun 26 Oct 2025 08:22:26 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: Gz1L1hlbqowL6BdQgzRX7gWNt3cRwdLMKgEN8smG3r0=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 0zbBkZ62dr/yZQO3asP9YyQ8MW3j8nW078S8WtIQO9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: Oct 19 08:22:26 2025 GMT Not After : Oct 26 08:22:26 2025 GMT Subject: CN=68f49fc2-65e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:cf:4c:0c:45:49:a9:37:85:1b:82:9f:d0: 12:da:25:c2:96:ba:64:ce:37:25:b8:07:1e:1a:fe: e4:ad:ee:a5:ac:01:13:37:3d:bc:6a:de:60:70:e3: 99:fd:88:ee:58:62:e1:ce:54:7b:a0:b0:9c:7b:56: 8f:ca:80:b3:dc:84:58:fd:74:ea:67:04:42:18:21: 59:ff:61:7d:d9:96:d3:52:f0:f5:65:19:18:b2:1c: a0:0c:bd:24:1c:b6:fb:4e:91:f7:38:2a:c8:c7:1c: 5d:d7:4f:7a:5c:88:3e:16:80:8e:24:32:20:61:8a: ad:7e:2c:3b:48:0a:ad:f0:e9:37:26:dd:ee:b8:e0: 40:6d:01:51:ae:e1:ff:1a:7f:cf:ba:70:52:dc:7b: 9f:a2:0c:ac:b9:38:5f:1d:6b:dc:07:e8:f4:7b:c2: 89:0c:8e:ba:19:58:55:95:31:82:07:9b:ed:ae:e7: fa:bd:e0:8f:cb:22:6e:87:90:0b:39:eb:da:b4:4c: 32:24:47:8b:56:e0:f1:3a:3a:d2:b3:c2:24:aa:13: 11:1c:6d:f5:7b:89:b2:33:7c:7d:b8:9b:21:76:27: 2c:48:eb:5f:78:35:3a:d1:f2:3a:83:a7:d2:bf:a5: 0b:0f:3a:3f:48:62:7b:70:fd:c0:1f:4d:16:c7:6d: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:05:F9:E7:4F:A2:29:51:78:77:CB:B2:61:C9:C8:A2:81:1D:52:C1 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:dc:58:b4:89:cf:a0:1b:3e:5b:5a:1f:03:e0:a9:0b:a1:1f: 4f:7c:50:d1:5b:af:a2:12:69:2d:c5:92:a2:f4:54:bd:26:e7: b9:50:0b:8c:85:e8:ee:b9:8b:69:17:b2:8a:72:a0:e1:59:bc: 4f:46:11:2d:a7:0a:c9:80:e7:f8:25:59:cd:ba:4f:ce:ba:38: f2:97:d2:fa:08:43:14:5b:8f:4b:a0:61:d9:6b:00:62:cb:03: ff:78:f5:de:b6:54:41:93:6e:d0:01:86:24:c8:11:ca:56:61: a3:38:51:38:e0:27:3d:25:d3:9a:66:37:20:49:f4:7c:69:08: 9b:50:e6:1b:f9:cd:80:b9:e9:5b:29:f2:8e:8d:2c:b1:f2:fe: fc:b5:82:3d:0c:0f:4e:c2:a6:60:52:77:43:9d:55:02:46:f1: d8:d6:90:18:64:fa:65:a7:52:90:37:2b:8f:aa:38:14:72:87: a9:4b:12:11:4b:bc:ff:f9:d0:d8:d0:d2:7a:31:99:a6:84:31: 99:28:4b:66:64:ee:8c:78:e8:77:49:5f:6f:2c:3b:91:65:fa: fd:03:00:4f:2d:a3:ba:52:92:85:f6:44:4c:69:a9:51:67:73: 04:df:e7:18:0e:84:85:11:f0:e3:0c:7d:77:dc:87:97:7c:5f: 2a:21:a9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUxMDE5MDgyMjI2WhcNMjUxMDI2MDgyMjI2WjAYMRYwFAYD VQQDEw02OGY0OWZjMi02NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJrPTAxFSak3hRuCn9AS2iXClrpkzjcluAceGv7kre6lrAETNz28at5gcOOZ /YjuWGLhzlR7oLCce1aPyoCz3IRY/XTqZwRCGCFZ/2F92ZbTUvD1ZRkYshygDL0k HLb7TpH3OCrIxxxd1096XIg+FoCOJDIgYYqtfiw7SAqt8Ok3Jt3uuOBAbQFRruH/ Gn/PunBS3HufogysuThfHWvcB+j0e8KJDI66GVhVlTGCB5vtruf6veCPyyJuh5AL OevatEwyJEeLVuDxOjrSs8IkqhMRHG31e4myM3x9uJshdicsSOtfeDU60fI6g6fS v6ULDzo/SGJ7cP3AH00Wx20RbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgF+edP oilReHfLsmHJyKKBHVLBMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk3Fi0ic+gGz5bWh8D4KkLoR9PfFDRW6+iEmktxZKi9FS9Jue5UAuM hejuuYtpF7KKcqDhWbxPRhEtpwrJgOf4JVnNuk/Oujjyl9L6CEMUW49LoGHZawBi ywP/ePXetlRBk27QAYYkyBHKVmGjOFE44Cc9JdOaZjcgSfR8aQibUOYb+c2Auelb KfKOjSyx8v78tYI9DA9OwqZgUndDnVUCRvHY1pAYZPplp1KQNyuPqjgUcoepSxIR S7z/+dDY0NJ6MZmmhDGZKEtmZO6MeOh3SV9vLDuRZfr9AwBPLaO6UpKF9kRMaalR Z3ME3+cYDoSFEfDjDH133IeXfF8qIamg -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:08 2025 by rpki-client